[AusNOG] AusCERT Week in Review - Week Ending 26/03/2010 (AUSCERT#20073f686)
Paul Fahey
paul at auscert.org.au
Fri Mar 26 17:21:32 EST 2010
Alerts, Advisories and Updates:
-------------------------------
Title: ASB-2010.0089.2 - UPDATED ALERT [Win][UNIX/Linux] Firefox: Multiple
vulnerabilities
Date: 26 March 2010
URL: http://www.auscert.org.au/12548
Title: ASB-2010.0091.2 - UPDATE [Appliance] Lexmark Printers and MarkNet
devices: Multiple vulnerabilities
Date: 25 March 2010
URL: http://www.auscert.org.au/12552
Title: ASB-2010.0072.2 - UPDATE [Win][UNIX/Linux] libpng: Denial of service
-
Remote with user interaction
Date: 24 March 2010
URL: http://www.auscert.org.au/12487
Title: ASB-2010.0090 - [Win][UNIX/Linux] vBulletin: Execute arbitrary
code/commands - Remote/unauthenticated
Date: 24 March 2010
URL: http://www.auscert.org.au/12551
Title: ASB-2010.0056.2 - UPDATED ALERT [Win][UNIX/Linux] Firefox,
Thunderbird
and Seamonkey: Multiple vulnerabilities
Date: 23 March 2010
URL: http://www.auscert.org.au/12411
Title: ASB-2010.0084.2 - UPDATE IBM DB2 Content Manager for z/OS Toolkit:
Reduced security - Unknown/unspecified
Date: 23 March 2010
URL: http://www.auscert.org.au/12537
Title: ASB-2010.0088 - [Win] Opera: Execute arbitrary code/commands - Remote
with user interaction
Date: 23 March 2010
URL: http://www.auscert.org.au/12547
Title: ASB-2009.1172.3 - UPDATE [Appliance] APC NMC based products: Multiple
vulnerabilities
Date: 22 March 2010
URL: http://www.auscert.org.au/12178
Title: ASB-2010.0086 - [Win][UNIX/Linux] Firefox 3.6: Execute arbitrary
code/commands - Remote/unauthenticated
Date: 22 March 2010
URL: http://www.auscert.org.au/12543
Title: ASB-2010.0087 - [Win][Linux][HP-UX][Solaris][AIX] IBM HTTP Server:
Multiple vulnerabilities
Date: 22 March 2010
URL: http://www.auscert.org.au/12544
External Security Bulletins:
----------------------------
Title: ESB-2010.0278 - [HP-UX] NFS/ONCplus: Reduced security -
Remote/unauthenticated
Date: 26 March 2010
OS: HP-UX
URL: http://www.auscert.org.au/12567
Title: ESB-2010.0277 - [RedHat] httpd: Multiple vulnerabilities
Date: 26 March 2010
OS: Red Hat Linux
URL: http://www.auscert.org.au/12566
Title: ESB-2010.0276 - [Win][UNIX/Linux][RedHat] gnutls: Multiple
vulnerabilities
Date: 26 March 2010
OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7,
Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD
Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista,
Other Linux Variants, Windows Server 2008
URL: http://www.auscert.org.au/12565
Title: ESB-2010.0275 - [RedHat] nss: Access privileged data -
Remote/unauthenticated
Date: 26 March 2010
OS: Red Hat Linux
URL: http://www.auscert.org.au/12564
Title: ESB-2010.0274 - [Win][UNIX/Linux][RedHat] openssl: Multiple
vulnerabilities
Date: 26 March 2010
OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7,
Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD
Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD,
Windows Server 2008, Other Linux Variants
URL: http://www.auscert.org.au/12563
Title: ESB-2010.0273 - [UNIX/Linux][Ubuntu] puppet: Multiple vulnerabilities
Date: 25 March 2010
OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian
GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD,
Other Linux Variants
URL: http://www.auscert.org.au/12562
Title: ESB-2010.0272 - [HP-UX] sendmail: Unauthorised access -
Remote/unauthenticated
Date: 25 March 2010
OS: HP-UX
URL: http://www.auscert.org.au/12561
Title: ESB-2010.0271 - [UNIX/Linux] MIT krb5 releases krb5-1.7 and later:
Denial of service - Remote/unauthenticated
Date: 25 March 2010
OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian
GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD,
Other Linux Variants
URL: http://www.auscert.org.au/12560
Title: ESB-2010.0270 - [Win][UNIX/Linux] Mime Mail and Menu Block (Drupal
third-party modules): Multiple vulnerabilities
Date: 25 March 2010
OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7,
Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD
Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista,
Other Linux Variants, Windows Server 2008
URL: http://www.auscert.org.au/12559
Title: ESB-2010.0269 - [Win][RedHat][HP-UX][Solaris][AIX][SUSE] HP Project
and
Portfolio Management Center : Cross-site scripting -
Remote/unauthenticated
Date: 25 March 2010
OS: Solaris, Windows 2003, Red Hat Linux, Windows 7, Windows XP, HP-UX,
SUSE, Windows 2000, AIX, Windows Vista, Windows Server 2008
URL: http://www.auscert.org.au/12558
Title: ESB-2010.0268 - [RedHat] rhev-hypervisor: Multiple vulnerabilities
Date: 25 March 2010
OS: Red Hat Linux
URL: http://www.auscert.org.au/12557
Title: ESB-2010.0267 - [Cisco] Cisco Unified Communications Manager Express:
Denial of service - Remote/unauthenticated
Date: 25 March 2010
OS: Cisco Products
URL: http://www.auscert.org.au/12556
Title: ESB-2010.0266 - ALERT [Cisco] Cisco IOS: Multiple vulnerabilities
Date: 25 March 2010
OS: Cisco Products
URL: http://www.auscert.org.au/12555
Title: ESB-2010.0265 - [Win][UNIX/Linux][Debian] mediawiki: Access
privileged
data - Remote/unauthenticated
Date: 24 March 2010
OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7,
Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Windows XP, Other BSD
Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista,
Other Linux Variants, Windows Server 2008
URL: http://www.auscert.org.au/12550
Title: ESB-2010.0264 - [RedHat] kernel-rt: Multiple vulnerabilities
Date: 24 March 2010
OS: Red Hat Linux
URL: http://www.auscert.org.au/12549
Title: ESB-2010.0263 - [UNIX/Linux] curl: Denial of service -
Remote/unauthenticated
Date: 23 March 2010
OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian
GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD,
Other Linux Variants
URL: http://www.auscert.org.au/12546
Title: ESB-2010.0262 - [Debian] spamass-milter: Execute arbitrary
code/commands - Remote/unauthenticated
Date: 23 March 2010
OS: Debian GNU/Linux
URL: http://www.auscert.org.au/12545
Title: ESB-2010.0261 - [Win] CA ARCserve Backup: Reduced security -
Unknown/unspecified
Date: 22 March 2010
OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista,
Windows Server 2008
URL: http://www.auscert.org.au/12542
Title: ESB-2010.0260 - [UNIX/Linux][Debian] ikiwiki: Cross-site scripting -
Remote with user interaction
Date: 22 March 2010
OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian
GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX,
FreeBSD, Other Linux Variants
URL: http://www.auscert.org.au/12541
Title: ESB-2010.0259 - [Debian] pango1.0: Denial of service - Remote with
user
interaction
Date: 22 March 2010
OS: Debian GNU/Linux
URL: http://www.auscert.org.au/12540
Title: ESB-2010.0068.2 - UPDATE [Win][UNIX/Linux] Drupal: Cross-site
scripting
- Remote/unauthenticated
Date: 26 March 2010
OS: Windows Server 2008, Other Linux Variants, Windows Vista, FreeBSD,
AIX,
OpenBSD, Windows 2000, SUSE, Other BSD Variants, HP-UX, Windows XP,
Ubuntu, Debian GNU/Linux, Mac OS X, Windows 7, Red Hat Linux, Windows
2003, Solaris, HP Tru64 UNIX, IRIX
URL: http://www.auscert.org.au/12270
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert at auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20100326/aa0faeda/attachment.html>
More information about the AusNOG
mailing list